Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
File: f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa (raw, json)
Hash identifier: fAdOuxcd8wHUx7Z83vTLxBvRUDbUAmYzq/5X/b0Sjb4=
Subject key identifier: 20:C9:D8:DC:BA:8A:D3:E0:D9:E4:1B:1F:ED:10:C0:34:85:41:13:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33787E11E43E83C51F1D6F13EA323A445B9E3A24
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
Signing time: Wed 12 Nov 2025 02:31:01 +0000
ROA not before: Wed 12 Nov 2025 02:31:01 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.39.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:78:7e:11:e4:3e:83:c5:1f:1d:6f:13:ea:32:3a:44:5b:9e:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:31:01 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=725743cc719dc9e23e185d024e3420a22275c379feab9a4b6162cbde4a6533a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:6a:eb:8b:ec:51:e2:46:e3:b3:dd:eb:3c:
19:b4:ee:c9:19:8d:1f:ac:0b:f5:5b:5d:cb:db:1d:
54:6f:be:80:09:ea:28:49:37:4a:42:c9:b9:86:16:
72:32:21:5f:7f:6a:ac:f0:23:54:88:76:4a:5b:c8:
18:ae:c7:60:c3:c0:71:68:50:0f:eb:d7:a0:41:4d:
db:69:be:70:2d:6d:61:8c:c8:1d:16:6e:e7:0d:c5:
ca:bc:b5:d9:e7:a8:26:67:fe:80:54:2e:fc:d7:27:
77:f2:ea:97:b5:6b:f8:d4:4a:99:60:db:84:cb:37:
13:4c:71:8e:9d:79:a9:80:7b:d8:36:de:97:e4:2c:
34:d5:4f:11:fa:16:56:56:73:58:e0:e8:c2:3d:31:
48:d6:72:6b:46:a0:2d:90:60:08:40:03:fc:e6:04:
06:bb:b4:17:d8:42:55:70:80:8d:f5:6a:11:ac:db:
04:1e:12:4e:c8:ae:a0:e2:9c:60:88:5d:4c:f2:31:
db:1a:a0:1f:03:09:29:9b:12:b1:96:4e:33:5a:1f:
31:cd:ec:94:34:ce:36:ee:f5:8c:4e:9c:c0:6e:72:
24:03:d0:9b:41:4a:ee:17:7c:29:85:77:08:d5:38:
7d:a0:e4:3e:62:92:b4:9f:24:d9:97:19:8f:68:d5:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:D8:DC:BA:8A:D3:E0:D9:E4:1B:1F:ED:10:C0:34:85:41:13:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f49dcf4f-74f0-4445-8e41-0534ecc0008c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.39.160.0/21
Signature Algorithm: sha256WithRSAEncryption
28:b4:76:e3:05:82:6d:9c:34:4e:e3:ae:62:65:f1:b1:c3:12:
c8:3f:19:5d:fc:c1:4c:3c:b6:07:60:b9:55:60:0a:aa:79:4d:
a3:2c:f0:7f:ab:91:17:14:8c:bf:21:14:15:f9:19:1e:c2:da:
31:e4:da:0a:d2:c3:92:fa:81:54:e9:a2:08:2f:46:d9:71:1e:
6b:bd:b9:82:b0:b6:18:bd:70:a9:43:ce:11:d7:ac:8d:bf:eb:
05:f5:fe:ed:4a:fd:ac:d0:a6:5b:3b:53:f5:ff:03:57:b7:79:
54:9f:16:80:89:78:d3:24:16:6c:ee:29:82:8f:bc:ed:2c:d4:
26:25:c0:79:d5:8e:8f:63:9e:24:48:e2:82:37:54:27:23:b1:
15:cc:e0:7e:ac:3e:33:1c:1f:38:93:18:5e:2f:da:a1:52:49:
68:5e:d1:cd:96:15:28:dc:de:00:09:81:43:02:8e:48:87:d8:
73:8e:b7:ec:8e:4b:5b:b6:37:3a:93:7c:b5:38:f8:83:c2:91:
4c:4b:b5:8a:cd:02:59:21:95:76:f5:b8:fb:9a:c5:29:08:36:
dc:a3:9d:ea:a8:52:25:47:d9:53:aa:c3:9f:1c:fe:b3:19:2b:
be:81:7c:fc:49:84:b7:47:34:0c:bc:1d:a0:b2:e7:23:b6:99:
07:37:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:05 2025 by rpki-client